4.
Run the
quit
command to return to the AAA mode.
Step 2
Create a domain.
NOTE
l
A domain is a group of users of the same type.
l
In the user name format userid@domain-name (for example, [email protected]), "userid"
indicates the user name for authentication and "domain-name" followed by "@" indicates the domain name.
l
The domain name for user login cannot exceed 15 characters, and the other domain names cannot exceed
20 characters.
1.
In the AAA mode, run the
domain
command to create a domain.
Step 3
Refer the authentication scheme.
NOTE
You can refer an authentication scheme in a domain only after the authentication scheme is created.
1.
In the domain mode, run the
authentication-scheme
command to reference the
authentication scheme.
2.
Run the
quit
command to return to the AAA mode.
Step 4
Configure a local user.
In the AAA mode, run the
local-user username service-type
command to create a local AAA
user.
----End
Example
User1 in the isp domain adopts the local server for authentication. The authentication scheme is
newscheme, the password is a123456, do as follows:
huawei(config)#
aaa
huawei(config-aaa)#
authentication-scheme newscheme
Info: Create a new authentication scheme
huawei(config-aaa-authen-newscheme)#
authentication-mode local
huawei(config-aaa-authen-newscheme)#
quit
huawei(config-aaa)#
domain isp
Info: Create a new domain
huawei(config-aaa-domain-isp)#
authentication-scheme newscheme
huawei(config-aaa-domain-isp)#
quit
huawei(config-aaa)#
local-user user1@isp service-type terminal password a123456
2.4.2 Configuring the Remote AAA (RADIUS Protocol)
The MA5600T/MA5603T/MA5608T is interconnected with the RADIUS server through the
RADIUS protocol to implement authentication and accounting.
Context
l
What is RADIUS:
–
Radius is short for the remote authentication dial-in user service. It is a distributed
information interaction protocol with the client-server structure. Generally, it is used to
manage a large number of distributed dial-in users.
SmartAX MA5600T/MA5603T/MA5608T Multi-service
Access Module
Commissioning and Configuration Guide
2 Basic Configurations
Issue 01 (2014-04-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
228